Search results

Not Populate Malcolm_beats_*

bugSomething isn't workingSomething isn't working

Status: Open.

#508 In cisagov/Malcolm;

· devilman85 opened on Nov 22, 2024

The Suricata alert did not appear on the dashboard

bugSomething isn't workingSomething isn't working

Status: Open.

#507 In cisagov/Malcolm;

· alleniverson33 opened on Nov 22, 2024

updates to documentation for Docker-based installation examples

docRelating to Malcolm documentationRelating to Malcolm documentation

Status: Open.

Task

#506 In cisagov/Malcolm;

· mmguero opened on Nov 20, 2024

 ·  

z.staging

yes/no/back dialog buttons in install/configure scripts don't work correctly on Ubuntu 22.04

UIRelating to general UI experienceRelating to general UI experience

bugSomething isn't workingSomething isn't working

install.pyRelating to the install.py configuration scriptRelating to the install.py configuration script

Status: Open.

Bug

#505 In cisagov/Malcolm;

· mmguero opened on Nov 20, 2024

 ·  

z.staging

extend intel.log with additional fields using corelight/ExtendIntel

arkimeRelating to Malcolm's use of ArkimeRelating to Malcolm's use of Arkime

dashboardsRelating to Malcolm's OpenSearch Dashboards interfaceRelating to Malcolm's OpenSearch Dashboards interface

enhancementNew feature or requestNew feature or request

externalDepends on a bug or feature external to this projectDepends on a bug or feature external to this project

intelRelated to integration with threat intel feedsRelated to integration with threat intel feeds

logstashRelating to Malcolm's use of LogstashRelating to Malcolm's use of Logstash

zeekRelating to Malcolm's use of ZeekRelating to Malcolm's use of Zeek

Status: Open.

Feature

#502 In cisagov/Malcolm;

· mmguero opened on Nov 19, 2024

 ·  

z.staging

somehow NetBox gets into a read-only mode

bugSomething isn't workingSomething isn't working

netboxRelated to Malcolm's use of NetBoxRelated to Malcolm's use of NetBox

Status: Open.

Bug

#501 In cisagov/Malcolm;

· mmguero opened on Nov 19, 2024

 ·  

z.staging

use new arkime tag-hiding feature to hide netbox tag from UI

arkimeRelating to Malcolm's use of ArkimeRelating to Malcolm's use of Arkime

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#495 In cisagov/Malcolm;

· mmguero opened on Nov 14, 2024

 ·  

v24.12.0

Mandiant threat intel source doesn't get split correctly when using JSON zeek log format

bugSomething isn't workingSomething isn't working

logstashRelating to Malcolm's use of LogstashRelating to Malcolm's use of Logstash

zeekRelating to Malcolm's use of ZeekRelating to Malcolm's use of Zeek

Status: Open.

Bug

#494 In cisagov/Malcolm;

· mmguero opened on Nov 14, 2024

 ·  

v24.12.0

standardize container health checks into scripts for all docker containers

cloudRelating to deployment of Malcolm in the cloud and/or with KubernetesRelating to deployment of Malcolm in the cloud and/or with Kubernetes

dockerRelating to docker and docker-compose as used by MalcolmRelating to docker and docker-compose as used by Malcolm

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#491 In cisagov/Malcolm;

· mmguero opened on Nov 7, 2024

 ·  

v24.12.0

uploading zeek log files with rolled-over filenames including the date don't get the log type detected correctly

bugSomething isn't workingSomething isn't working

logstashRelating to Malcolm's use of LogstashRelating to Malcolm's use of Logstash

regressionIt worked at one point...It worked at one point...

uploadRelating to PCAP and/or Zeek log ingestionRelating to PCAP and/or Zeek log ingestion

Status: Open.

Bug

#490 In cisagov/Malcolm;

· mmguero opened on Nov 7, 2024

 ·  

v24.12.0

OpenSearch to Splunk export/searching capabilities

enhancementNew feature or requestNew feature or request

opensearchRelating to Malcolm's use of OpenSearchRelating to Malcolm's use of OpenSearch

researchResearch or proof-of-concept for an ideaResearch or proof-of-concept for an idea

Status: Open.

#487 In cisagov/Malcolm;

· mmguero opened on Nov 5, 2024

automated testing

testingRelated to automated system testing of MalcolmRelated to automated system testing of Malcolm

Status: Open.

#486 In cisagov/Malcolm;

· mmguero opened on Nov 5, 2024

 ·  

v24.12.0